Vulnerability research, cryptography, FOSS, finance and random stuff. Leading @cellebrite's iOS research.
Israel
Joined March 2019
- Tweets1.1K
- Following563
- Followers1.6K
- Likes11.2K
Pinned Tweet
Interested in iOS vulnerability research? @Cellebrite's iOS team is expanding. We're looking for seasoned researchers (all platforms) as well as juniors with iOS jailbreak scene background.
Positions are remote and you get a chance to work with very talented and friendly people.
guyru retweeted
Our team is shining in the City of Lights! ✨
We're having such meaningful conversations at @hexacon_fr in Paris. At the booth, people are stopping by and staying for hours to solve the combined Pokémon and vulnerability research challenge we developed. (1/2)
guyru retweeted
Still looking for talented vulnerability researchers to join our French team 🇫🇷
If you're attending #Hexacon, stop by our booth and let's talk. We'd be happy to discuss the role, the team, and the kind of research challenges we work on.
See you there 😀
xitter.cf/hexacon_fr/status/2095…
5⃣ /5⃣ Five out of five years as sponsor for Cellebrite!📱
@CellebriteLabs focuses on vulnerability research and exploitation allowing law enforcement agencies to collect evidence via physical access vectors.
I'm coming to Paris for Hexacon (again) in two weeks. Drop by our booth to say hi.
5⃣ /5⃣ Five out of five years as sponsor for Cellebrite!📱
@CellebriteLabs focuses on vulnerability research and exploitation allowing law enforcement agencies to collect evidence via physical access vectors.
ghidra-rpc now has experimental Windows support
I don't use Windows myself, so I'd appreciate people trying it out and telling me what breaks. Issues and feedback welcome!
We're mostly an IDA shop at @CellebriteLabs, but I decided to play around with Ghidra. My main motivation was to experiment with agentic reverse engineering techniques. The result is an agent skill for Ghidra, which we are releasing publicly:
github.com/cellebrite-labs/g… >>
Oxygen being Russian was kind of widely known truth. I get they apparently certified otherwise to federal agencies, but shouldn't it been quickly exposed by a simple background check?
Oddly, I reported back in 2016 that Oxygen was Russian-owned. This was never a secret in the digital forensics industry, but US federal agencies were still fooled by the company's claims of US ownership. Here's the 2016 piece mentioning Russian ownership theintercept.com/2016/10/31/…
guyru retweeted
ida-bridge runs on Windows and Linux now, not only macOS.
Same on all three: your agents drive headless or UI IDA through one local CLI.
updated our repo @CellebriteLabs:
github.com/cellebrite-labs/i…
רכבת ישראל @israelrailways איך זה שעישון וייפים ברכבת לא נאכף? מילא ברציפים, אבל בתוך הרכבת עצמה מעשנים ואין אכיפה
guyru retweeted
🚨 Meet the first speaker of #POC2026
Lars Fröder (@opa334dev) - “iOS Jailbreaking: From P(PL)ast to PreS(PTM)ent”
This is just the beginning. More POC2026 speakers will be revealed soon — stay tuned.
👀 Our CFP is still open until September 30.
Another useful internal tool we're releasing. I hope others will also find Rony's work useful (or that @HexRaysSA will make life easier to maintain plugins over different versions :-))
If you maintain a substantial IDA infrastructure, you know the move from IDA 8.x to 9.x touched almost all of it.
To ease the pain, I built ida-porter.
Now open source from @CellebriteLabs:
github.com/cellebrite-labs/i…
guyru retweeted
If you maintain a substantial IDA infrastructure, you know the move from IDA 8.x to 9.x touched almost all of it.
To ease the pain, I built ida-porter.
Now open source from @CellebriteLabs:
github.com/cellebrite-labs/i…
Wrapped up the fourth iteration of @nooffense_il. Thanks @iH8sn0w and @tomerharpaz for making the effort of coming over to Tel Aviv to give some incredible talks. See you next time.
Rony's ida-bridge really improved our LLM-based reversing at @CellebriteLabs. His work and ideas around it were a significant part of my inspiration for ghidra-rpc. I hope others will find it useful as we did.
ida-bridge is my take on how agents should work with IDA.
One interface to open or create IDBs, inspect and change them, and start or stop IDA instances.
Now open source from @CellebriteLabs:
github.com/cellebrite-labs/i…
guyru retweeted
These might be the two best iOS talks you have ever heard - if you are a security researcher in Tel Aviv you don't want to miss next weeks's NoOFFENSE!
Final talk list for NoOffense 2026 is out! @tomerharpaz and @iH8sn0w are joining us from opposite ends of the globe, flying in from Japan and Canada, to deliver incredible talks on iOS security research.
If you haven't registered yet, do so at nooffensecon.org/registratio… and ping me so I can help get it approved.
Final talk list for NoOffense 2026 is out! @tomerharpaz and @iH8sn0w are joining us from opposite ends of the globe, flying in from Japan and Canada, to deliver incredible talks on iOS security research.